DEBIAN-CVE-2019-8515

A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information...

The vulnerability of the slapd package in OpenLDAP allows a intruder to disclose protected information.

The vulnerability of the slapd package in OpenLDAP is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of the RDP protocol implementation in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the RDP protocol implementation in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created application...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created application...

The vulnerability of the Microsoft Authentication Library (MSAL), which stems from the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of the Microsoft Authentication Library MSAL is related to the lack of protection for service data. Exploiting this vulnerability could allow a perpetrator to disclose the protected information...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

GitLab Doles Out Half a Million Bucks to White Hats

GitLab has awarded a total of $565,650 in security bug bounties to 171 researchers who reported valid vulnerabilities in the past year — and has announced the winners of its latest hacking contest. GitLab, which started out as a web-based Git repository manager before moving into the DevOps...

CVE-2019-5251

There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information...

The vulnerability of Windows and Linux operating systems, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Windows and Linux operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) related to session management errors allows a perpetrator to disclose sensitive information or cause service failures.

The vulnerability of the microprogrammed software of the Intel Baseboard Management Controller BMC relates to session management errors. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause system failures...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility arises from incorrect default access rights settings, allowing a malicious actor to disclose protected information or cause service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connection tool is related to incorrect default access rights settings. Exploiting this vulnerability could allow an attacker to disclose protected information or cause service failures...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to reading data beyond the buffer in memory, allowing an intruder to disclose protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of Intel Active Management Technology’s microprogramming software lies in insufficient validation of input data. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

CVE-2019-7004

A Cross-Site Scripting XSS vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, including unsupported versions, were not...

envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure

A flaw was found in envoy. A malformed request header may cause route matchers or access controls to be bypassed, resulting in escalation of privileges or information disclosure. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Intel Baseboard Management Controller Heap Corruption Vulnerability

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. A heap corruption vulnerability exists in Intel BMC, which can be exploited by attackers to cause information disclosure, elevation of privilege, or denial of service...

PT-2019-5580 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to insufficient checking of exceptional states in Intel processor microcode, potentially allowing an authenticated user to partially escalate privileges, cause...

Google Chrome cookies information disclosure vulnerability

Google Chrome is a web browser from Google, Inc. cookies is one of the cookie plug-ins. An information disclosure vulnerability exists in Google Chrome cookies, which stems from the program's failure to fully implement policies. The vulnerability can be exploited to disclose cross-origin data via...

Intel Baseboard Management Controller Code Issue Vulnerability

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. A code issue vulnerability exists in Intel BMC, which can be exploited by an attacker to disclose information and/or cause a denial of service...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from insufficient validation of input data. This allows a perpetrator to disclose protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC relates to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...